How Nolex S.r.l. collects, uses, stores, and protects your personal data, under EU Regulation 2016/679 (GDPR).
Draft — pending legal review
This page accurately describes how Nolex works, but the text hasn't been reviewed by a lawyer yet and isn't in effect. Don't rely on this page for legal decisions until the final version is published.
Nolex places great importance on protecting users' personal data. This Privacy Policy describes how Nolex collects, uses, stores, and protects the personal data of users of the website, the app, the marketplace, and related services. This policy is drafted in accordance with European Regulation 2016/679 (GDPR).
The controller for personal data is: Nolex S.r.l., registered at [Insert Address], privacy email: Nolex.srl@gmail.com. The controller is responsible for decisions on the collection, use, security, storage, and disclosure of data.
Depending on the context, Nolex acts as data controller — when processing data for account management, security, authentication, payments, fraud prevention, customer support, and service improvement — or as data processor, when processing personal data on behalf of a Partner Business for managing customers and rental processes, governed by a Data Processing Agreement (DPA).
Nolex collects: identifying data (first and last name, date of birth, identity document, identity checks); contact data (email, phone number, address, communication details); business data (company name, VAT number, corporate records, legal representatives, tax data); transactional data (bookings, rental history, payments, refunds, commissions, order communications); technical data (IP address, browser, device used, security logs, usage data); Terms acceptance records (the version accepted, the date and time, and the IP address and browser or device details at that moment); verification documents for KYC procedures (identity documents, company registry extracts, images for verification).
Data is processed to: create and manage accounts (authentication, credential recovery); operate the marketplace (search, publishing, bookings, chat); perform the rental contract (document generation, coordination); manage payments (transaction processing, payouts, refunds); ensure security and prevent fraud (identity checks, anti-fraud controls); improve the service (usage analysis, platform optimization); keep a record of which version of the Terms each user accepted and when.
Nolex processes personal data on the basis of: contract performance; legal obligations (tax and accounting); legitimate interest (security, fraud prevention, and being able to show which Terms a user accepted); user consent (marketing or non-essential cookies).
Nolex shares data only with parties necessary to provide the service: payment providers, hosting, email services, KYC providers, and partner businesses involved in the rental. Nolex does not sell users' personal data.
When a booking is made, the customer's data (name, contact details, booking details) is shared with the partner business solely for managing the rental, delivery, and support.
Data is retained for as long as necessary to provide the service and meet legal obligations, after which it is deleted or anonymized. Nolex applies advanced security measures such as encryption, secure authentication, access control, and backups. Records of acceptance of the Terms are kept as evidence of what was agreed and are not deleted when an account is closed.
Users may exercise their GDPR rights at any time — access, rectification, erasure, restriction, objection, portability, and withdrawal of consent — by writing to Nolex.srl@gmail.com.
To exercise your GDPR rights or for privacy questions, write to Nolex.srl@gmail.com.